CVE-2019-10923
A vulnerability has been identified in CP1604 (All versions < V2.8), CP1616 (All versions < V2.8)...
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
- Record
CVE-2019-10923- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2019-2637
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
- Record
EUVD-2019-2637- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gm9h-7xvc-jg2f
A vulnerability has been identified in CP1604 (All versions < V2.8), CP1616 (All versions < V2.8)...
A vulnerability has been identified in CP1604 (All versions < V2.8), CP1616 (All versions < V2.8), Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (All versions < V4.1.1 Patch 05), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions < V4.5.0 Patch 01), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions < V4.5.0), SCALANCE X-200IRT (All versions < V5.2.1), SIMATIC ET 200M (All versions), SIMATIC ET 200S (All versions), SIMATIC ET 200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0) (All versions), SIMATIC ET 200pro (All versions), SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (All versions), SIMATIC S7-300 CPU family (incl. F) (All versions), SIMATIC S7-400 (incl. F) V6 and below (All versions), SIMATIC S7-400 PN/DP V7 (incl. F) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions < SIMATIC WinAC RTX 2010 SP3), SIMOTION (All versions), SINAMICS DCM (All versions < V1.5 HF1), SINAMICS DCP (All versions), SINAMICS G110M V4.7 (Control Unit) (All versions < V4.7 SP10 HF5), SINAMICS G120 V4.7 (Control Unit) (All versions < V4.7 SP10 HF5), SINAMICS G130 V4.7 (Control Unit) (All versions < V4.7 HF29), SINAMICS G150 (Control Unit) (All versions < V4.8), SINAMICS GH150 V4.7 (Control Unit) (All versions), SINAMICS GL150 V4.7 (Control Unit) (All versions), SINAMICS GM150 V4.7 (Control Unit) (All versions), SINAMICS S110 (Control Unit) (All versions), SINAMICS S120 V4.7 (Control Unit and CBE20) (All versions < V4.7 HF34), SINAMICS S150 (Control Unit) (All versions < V4.8), SINAMICS SL150 V4.7 (Control Unit) (All versions), SINAMICS SM120 V4.7 (Control Unit) (All versions), SINUMERIK 828D (All versions < V4.8 SP5), SINUMERIK 840D sl (All versions). An attacker with network access to an affected product may cause a Denial-of-Service condition by breaking the real-time synchronization (IRT) of the affected installation. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts the availability of the affected installations.
- Record
GHSA-gm9h-7xvc-jg2f- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
- Record
CVE-2019-10923- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
- siemens cp1604 firmware
- siemens cp1616 firmware
- siemens development/evaluation kits for profinet io: dk standard ethernet controller
- siemens development/evaluation kits for profinet io: ek-ertec 200
- siemens development/evaluation kits for profinet io: ek-ertec 200p
- siemens dk standard ethernet controller firmware
- siemens ek-ertec 200 firmware
- siemens ek-ertec 200p firmware
- siemens scalance x-200irt family (incl. siplus net variants)
- siemens scalance x-200irt firmware
- siemens simatic cp 1604
- siemens simatic cp 1616
Show 114 moreShow less
- siemens simatic et 200m (incl. siplus variants)
- siemens simatic et 200mp im 155-5 pn hf
- siemens simatic et 200mp im 155-5 pn st
- siemens simatic et 200pro im 154-3 pn hf
- siemens simatic et 200pro im 154-4 pn hf
- siemens simatic et 200pro im 154-8 pn/dp cpu
- siemens simatic et 200pro im 154-8f pn/dp cpu
- siemens simatic et 200pro im 154-8fx pn/dp cpu
- siemens simatic et 200s im 151-8 pn/dp cpu
- siemens simatic et 200s im 151-8f pn/dp cpu
- siemens simatic et 200sp im 155-6 pn hf
- siemens simatic et 200sp im 155-6 pn st
- siemens simatic et 200sp im 155-6 pn st ba
- siemens simatic et200ecopn, 16di, dc24v, 8xm12
- siemens simatic et200ecopn, 16do dc24v/1,3a, 8xm12
- siemens simatic et200ecopn, 4ao u/i 4xm12
- siemens simatic et200ecopn, 8 dio, dc24v/1,3a, 8xm12
- siemens simatic et200ecopn, 8 do, dc24v/2a, 8xm12
- siemens simatic et200ecopn, 8ai rtd/tc 8xm12
- siemens simatic et200ecopn, 8ai; 4 u/i; 4 rtd/tc 8xm12
- siemens simatic et200ecopn, 8di, dc24v, 4xm12
- siemens simatic et200ecopn, 8di, dc24v, 8xm12
- siemens simatic et200ecopn, 8do, dc24v/0,5a, 4xm12
- siemens simatic et200ecopn, 8do, dc24v/1,3a, 4xm12
- siemens simatic et200ecopn, 8do, dc24v/1,3a, 8xm12
- siemens simatic et200ecopn: io-link master
- siemens simatic et200s (incl. siplus variants)
- siemens simatic pn/pn coupler (incl. siplus net variants)
- siemens simatic s7-300 cpu 314c-2 pn/dp
- siemens simatic s7-300 cpu 315-2 pn/dp
- siemens simatic s7-300 cpu 315f-2 pn/dp
- siemens simatic s7-300 cpu 315t-3 pn/dp
- siemens simatic s7-300 cpu 317-2 pn/dp
- siemens simatic s7-300 cpu 317f-2 pn/dp
- siemens simatic s7-300 cpu 317t-3 pn/dp
- siemens simatic s7-300 cpu 317tf-3 pn/dp
- siemens simatic s7-300 cpu 319-3 pn/dp
- siemens simatic s7-300 cpu 319f-3 pn/dp
- siemens simatic s7-400 cpu 412-2 pn v7
- siemens simatic s7-400 cpu 414-3 pn/dp v7
- siemens simatic s7-400 cpu 414f-3 pn/dp v7
- siemens simatic s7-400 cpu 416-3 pn/dp v7
- siemens simatic s7-400 cpu 416f-3 pn/dp v7
- siemens simatic s7-400 pn/dp v6 and below cpu family (incl. siplus variants)
- siemens simatic winac rtx 2010
- siemens simatic winac rtx f 2010
- siemens simatic et 200ecopn firmware
- siemens simatic et 200m firmware
- siemens simatic et 200s firmware
- siemens simatic pn\/pn coupler 6es7158-3ad01-0xa0 firmware
- siemens simatic s7-300 cpu 312 ifm firmware
- siemens simatic s7-300 cpu 313 firmware
- siemens simatic s7-300 cpu 314 firmware
- siemens simatic s7-300 cpu 314 ifm firmware
- siemens simatic s7-300 cpu 315-2 dp firmware
- siemens simatic s7-300 cpu 315 firmware
- siemens simatic s7-300 cpu 316-2 dp firmware
- siemens simatic s7-300 cpu 318-2 firmware
- siemens simatic s7-300 cpu firmware
- siemens simatic s7-400 dp v7 firmware
- siemens simatic s7-400 pn v7 firmware
- siemens simatic s7-400 v6 firmware
- siemens simatic winac rtx \(f\) firmware
- siemens simotion
- siemens simotion firmware
- siemens sinamics dcm
- siemens sinamics dcp
- siemens sinamics g110m v4.7 control unit
- siemens sinamics g120 v4.7 control unit (incl. siplus variants)
- siemens sinamics g130
- siemens sinamics g150
- siemens sinamics gh150 v4.7 control unit
- siemens sinamics gl150 v4.7 control unit
- siemens sinamics gm150 v4.7 control unit
- siemens sinamics s110 control unit
- siemens sinamics s120 v4.7 control unit and cbe20 (incl. siplus variants)
- siemens sinamics s150
- siemens sinamics sl150 v4.7 control unit
- siemens sinamics sm120 v4.7 control unit
- siemens sinamics dcm firmware
- siemens sinamics dcp firmware
- siemens sinamics g110m firmware
- siemens sinamics g120 firmware
- siemens sinamics g130 firmware
- siemens sinamics g150 firmware
- siemens sinamics gh150 firmware
- siemens sinamics gl150 firmware
- siemens sinamics gm150 firmware
- siemens sinamics s110 firmware
- siemens sinamics s120 firmware
- siemens sinamics s150 firmware
- siemens sinamics sl150 firmware
- siemens sinamics sm120 firmware
- siemens sinumerik 828d
- siemens sinumerik 840d sl
- siemens siplus et 200mp im 155-5 pn hf
- siemens siplus et 200mp im 155-5 pn hf t1 rail
- siemens siplus et 200mp im 155-5 pn st
- siemens siplus et 200mp im 155-5 pn st tx rail
- siemens siplus et 200s im 151-8 pn/dp cpu
- siemens siplus et 200s im 151-8f pn/dp cpu
- siemens siplus et 200sp im 155-6 pn hf
- siemens siplus et 200sp im 155-6 pn hf t1 rail
- siemens siplus et 200sp im 155-6 pn st
- siemens siplus et 200sp im 155-6 pn st ba
- siemens siplus et 200sp im 155-6 pn st ba tx rail
- siemens siplus et 200sp im 155-6 pn st tx rail
- siemens siplus s7-300 cpu 314c-2 pn/dp
- siemens siplus s7-300 cpu 315-2 pn/dp
- siemens siplus s7-300 cpu 315f-2 pn/dp
- siemens siplus s7-300 cpu 317-2 pn/dp
- siemens siplus s7-300 cpu 317f-2 pn/dp
- siemens siplus s7-400 cpu 414-3 pn/dp v7
- siemens siplus s7-400 cpu 416-3 pn/dp v7
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10923 is a high vulnerability (CVSS 7.5) in Siemens Cp1604 Firmware, published October 10, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.40%, the 72nd percentile. No source names a fixed version.